Read the docs
TI-2026-47016 Aliases CVE-2026-66027GHSA-59cg-fj2q-33c4

Suna < 0.9.102 Broken Access Control via Message Queue API

Priority HIGH 73CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the victim's running AI agent with the victim's credentials and permissions.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00456 39th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed suna (kortix-ai): 0.9.102

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kortix-aisunabefore 0.9.1020.9.102Patch availableCNA
  • suna Vendorkortix-ai Affected before 0.9.102 Fixed in 0.9.102 Patch available CNA

Remediation

  • Fix · CNA suna (kortix-ai) Fixed in 0.9.102

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-66027
  2. 2026-10-03 Alias added: GHSA-59cg-fj2q-33c4

References

Exploit 1

Patch 3

  • TI-2026-10949 kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting CVSS 4.0MEDIUM 5.3
  • TI-2026-70528 Server-side request forgery in Kortix Suna bypasses IP guard CVSS 4.0LOW 2.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences